CVE-2024-21757 | Fortinet FortiManager/FortiAnalyzer up to 7.0.10/7.2.4/7.4.1 Configuration Backup unverified password change (FG-IR-23-467)

A vulnerability classified as problematic was found in Fortinet FortiManager and FortiAnalyzer up to 7.0.10/7.2.4/7.4.1. Affected by this vulnerability is an unknown functionality of the component Configuration Backup Handler. The manipulation leads to unverified password change.

This vulnerability is known as CVE-2024-21757. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.